$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft File: NJy71cLPQZXMbsfyH2B1gaAiTao.mft (raw, json) Hash identifier: fSgLBtSK3OnWGMn1XxmFFYK8E8MeHFIho3/2gb3r/dE= Subject key identifier: 2F:01:B6:D9:D6:E3:88:98:08:69:05:7E:E0:B3:45:54:61:B9:6B:E7 Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Certificate serial: 018F92032B6204864A9115642582D5D09D0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft Manifest number: 12A8 Signing time: Sun 19 May 2024 18:00:32 +0000 Manifest this update: Sun 19 May 2024 18:00:32 +0000 Manifest next update: Mon 20 May 2024 18:00:32 +0000 Files and hashes: 1: 0fHX7bhteTbdIcpIVe_MB7cQjxE.roa (hash: tRYF4uDnqGb68uemqIe1xliH5JRwaV8llZ6b5gDddQU=) 2: 3KjXvS56nnWvii8NOABXWqzL5Uw.roa (hash: zgzBkEhmekKNniAk5JKLPXnLl7ECWQXzloDGzeSruo8=) 3: 3wyQEu5OoyZI6zzFu_K7eR8r2k0.roa (hash: XH9jkxrIlZPxvTylaely66F2tNQox49s+kPAwUtxuCA=) 4: 4PxuigS3jdQiqJlloNpR1G2rMB8.roa (hash: zEAntRd6uHAgZ+dFKEjj2MybVvYrpJkvngy80mMz4jk=) 5: 8Z6YGgL_i8ZtUSpNhCbgs9BKSoM.roa (hash: c7z89SkSvKXv4bdB75R0WY3NlP2Tpv59POmfO6/fhJs=) 6: A5c1Q-FjCc_jEWCNtVE_rUfMjoc.roa (hash: w8N7uudj9yGZdwnDoZQ53EALs9rRSqIY2UYmPh+Extg=) 7: BYUwJEs-GWBrAJsOlszBio-L1mY.roa (hash: 3JsGt0KwCzBtOZB3t33fhBoWrYHh7joRL1hG8qIzaDQ=) 8: Bn9XLuhaP6gdWZ4pWMwoE2fmU7g.roa (hash: ITFvaSHvmLUFYuHV3iSvjEM4TLZoNGx974hcHz4fNrE=) 9: D8jAtFDQWnedEDik-hivW1nBsOU.roa (hash: i6andS3J3WM5bXlIPD8dZY4a7xwbaQcTxuJAovhR8Mk=) 10: DNq1NO3Wnmql62j0oQNjD8eZt48.roa (hash: MW7OZEOk1jGR2x7yDL+gxliLl5bsGDpyRB+5G0REdOY=) 11: EWZlZD9kRqgI8UZV4SRGzS0U5n4.roa (hash: 8tO1kl1Hvfuhd/CKIrAenW5qfr8b9eThsMZvf/5y1PE=) 12: F8cpwdwivhthPznQ4bGGquvZOEc.roa (hash: 7CicrF+ipGiLkxJE78kRDsdGqzROlrxwaECqrYjqyes=) 13: FUlrEPcodaQE6sPzRi3JCNfdxeY.roa (hash: qM0TRfGKmmCORrWOW44IF5slD6R/As5gkpz3+WY7OyE=) 14: GcPNs6pJc6W38yIKOJM-iP46JDA.roa (hash: BexSvn9EKJeGF6Gx2MQy5a0e1jIfUCvJz+R3ZbS8mr0=) 15: GnHJTN7ncCstUelSbleEG4HEl40.roa (hash: asQ2rmkNknwu45mNTB7F7R0kZwFfLaaKJJhnmNywaqM=) 16: JbVXBUnLG64zA1S7UqpTYHBRPN0.roa (hash: YjKFq8tPE+FguPruEfAcYBaECSyWDEX2YNepmsW3Mbc=) 17: KNBkNlaJuSqaJjuMECrJGYVdBIQ.roa (hash: 0W7H31aHUh1Vr9pbSrp4wtg6VlrLcLXVKWnwxkx5zKc=) 18: LOSFGh-4kVwsksLXcZu--po7Gzo.roa (hash: C4S/vWav2FwV+VNO3PWNChbx1DdKqPdxPQ76/ijw2tU=) 19: MLDlOlvlShqjwwpEH_LGLUQdpmw.roa (hash: DqdoWtwPcu9QgrkpcVg2Nfa6hlDLvLdJvuxWg1EUWKk=) 20: NJy71cLPQZXMbsfyH2B1gaAiTao.crl (hash: 8iKXp4APTnn77uiG+RmxHv+W8DxYHmqGWG/wNHnRbqA=) 21: NnbtXj1tNY4lI6jdFK-1jR2UByw.roa (hash: QM9Q5YXH789bCCc8XqmFOy8uVlRXAjwxnScyPSfRYJI=) 22: QnZJL3qYLI_FGPipdj1588Iq4N0.roa (hash: iJivv3xvorWtOq7mfmZu1ALTNz1OB2IiX50lACoMH2A=) 23: U3OaYV-wOvVFY6zJc-1Cns0rrf8.roa (hash: TK3TTlmeNmLswojx1lQYMJRjBCWZlhllUHswQFlwxew=) 24: VSkOhfiwsQjKyYNLwmHQD99iifQ.roa (hash: dlL2DiTBNR5LOJj3gMNn+vfpZNknkBIld3mWRUpwkBc=) 25: WJkTmjAKX__LNrSNfWSUEsmETtM.roa (hash: m1wWuakdJR0VDlV4cysT82Zy2fYYVgfHzcHpDsvrW0c=) 26: WQMCALraDK8bS2E2l5pIshVREg0.roa (hash: iKQ3rbDaYcqfIC1rGGpsmc3QJtLy0pmw/Ld2E4OLIR4=) 27: XoKlLTttG9buIMoPICj4w77ocps.roa (hash: VjHPj0RA3fmLdHxTHnncllCJJLQ6Rem0er0Z7Hg1+00=) 28: _UBWiA5SbxfGU8IJwclf_0CS9Jg.roa (hash: IOlQfKGFOnaabt4KBQ+vn1NL+QqjuyiTyNPQ+JDiwoQ=) 29: fcfydsFOVC6qGO1FRRr2e2bZxDA.roa (hash: /YPhjeHDFhnmAnKbLoBN6QoNwGbCMA7/PpyiWBr43no=) 30: fd7CAoPRAiiEQg5rRNt8SfZn8UY.roa (hash: 5AISExqKrhwx7ntk4TDYNV/UjyUx+xGFyjY+w+QtbtQ=) 31: hygtEluyax9mon_jVH7XDM1YFsM.roa (hash: /06+RrIn+7XGv/IJmvEsl7+3U7NF9KeICrdXO4d3bRc=) 32: kVEAGEGPSgfIT1Gh668kvSnXhG4.roa (hash: HeiD2nz+7PkKCQZMYZKxI/qMmVosyZMkk3qSj8trWVo=) 33: koG0QOX3iYcCRARZ2BbMxnqqiIA.roa (hash: 8aDLZcKV+rP4/r0Mko71fAPX+Wt8HtZv94jMbea2lww=) 34: qbjWDYLDdfYWzsmBZPn0jZSXsYI.roa (hash: zXrpxAK614oflhjemlLGnMpVRNauwEf9y32xBtLKBe4=) 35: tysWAmy5ZtD5QB3Ed1pMHAJLPYw.roa (hash: NUHKBMUT5JETCy4dvM9uiaGeQMLrOv/YXvpNzgzVsdg=) 36: uSTmAGd3s6PIiJS7L9fCWnZp5zo.roa (hash: 9qcben1NxiwJCjU91w/96P7stG+6sdHi/LPUMUAw9Ps=) 37: z0yieLihF4AKdy5kuaWBCWLeKSU.roa (hash: fsdb61i2kEAJHiWq2j79bvdzNqbb/OdX16oiKEqgurA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 May 2024 14:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:92:03:2b:62:04:86:4a:91:15:64:25:82:d5:d0:9d:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Validity Not Before: May 19 18:00:32 2024 GMT Not After : May 20 18:00:32 2024 GMT Subject: CN=2f01b6d9d6e388980869057ee0b3455461b96be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:15:c4:8f:a0:6a:8e:a5:b0:dc:df:38:8b:80: 4a:fe:f5:7b:4c:82:2a:b4:59:41:67:d4:10:ae:dd: 7d:70:aa:f1:4a:de:13:87:dd:9a:66:f1:67:60:65: 40:99:9b:e3:1b:87:0b:cf:a1:5d:f3:3c:94:77:74: e6:9c:11:b2:2b:d3:6f:34:3d:11:08:40:ea:8c:10: e2:24:bf:f5:25:75:f8:0c:35:6d:ae:3f:f2:99:fd: 5b:9a:a0:41:e1:b4:be:14:8b:8a:e7:6e:76:91:d0: 33:2b:49:c3:46:38:4e:f7:59:9f:df:ce:36:15:5c: 88:7b:fe:88:47:b3:ce:54:1b:ad:7b:92:54:3c:eb: 91:b4:84:1e:f2:b1:da:7d:69:38:d7:7c:d3:80:ea: 8f:3b:b4:db:49:39:9b:86:b1:92:8c:10:1f:61:1f: e5:a0:f8:12:02:c9:44:f1:c0:4b:c9:e6:60:c3:cd: 02:63:47:5f:04:ed:3e:a8:63:fc:ea:ea:f6:87:e0: 00:0c:fb:83:cf:2a:85:42:ad:91:76:a1:80:a3:e9: ff:dd:42:4f:2a:58:0a:ce:40:e9:f4:ac:52:ff:68: 99:0a:ab:bb:27:79:79:63:bc:60:b5:7b:4f:61:4c: 0a:25:c0:73:32:eb:7a:80:93:49:7d:7c:7a:60:07: b4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:01:B6:D9:D6:E3:88:98:08:69:05:7E:E0:B3:45:54:61:B9:6B:E7 X509v3 Authority Key Identifier: keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:89:db:0e:d6:98:2c:a6:08:e0:07:89:45:a3:86:e1:70:97: 22:ee:12:27:d6:9f:50:97:51:0b:c8:68:a4:ee:ce:49:e0:c6: 57:3b:b2:d5:93:f4:d0:39:9b:5d:97:a7:e6:9e:7c:91:5d:a3: 0e:93:da:e5:ce:1f:be:d8:2b:75:66:6c:ba:00:28:09:4c:ac: 51:94:f8:75:dc:d8:2c:2b:1b:ac:20:f2:8f:44:f8:a4:79:de: 49:3a:45:9d:09:f9:d0:68:dd:41:b8:94:da:68:58:f0:4d:98: 02:14:81:b2:31:42:5c:94:6a:a2:09:9d:0b:f2:50:d1:71:df: d9:fe:e1:f5:a0:b3:c7:3f:44:11:a4:13:8b:d4:18:64:ab:a3: 0b:6d:25:aa:ed:af:8c:86:6a:92:d2:fe:cf:89:3d:eb:ab:c6: 9d:5a:bb:6c:b8:c6:81:b9:2c:55:77:44:d6:dc:89:e8:82:13: 0a:cd:46:89:29:09:20:57:c8:4c:03:34:44:3d:ad:cb:78:fc: 85:67:e0:0c:d1:37:3e:32:ec:a4:de:c2:93:b2:df:21:ed:c7: 53:93:84:75:59:99:4a:9e:07:40:a2:d7:f8:e1:a9:cf:d3:13: 57:d5:a7:e4:5f:61:aa:fc:05:92:c4:a9:c2:73:d9:05:df:02: b7:b2:74:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+SAytiBIZKkRVkJYLV0J0LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy MjRkYWEwHhcNMjQwNTE5MTgwMDMyWhcNMjQwNTIwMTgwMDMyWjAzMTEwLwYDVQQD EygyZjAxYjZkOWQ2ZTM4ODk4MDg2OTA1N2VlMGIzNDU1NDYxYjk2YmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xXEj6BqjqWw3N84i4BK/vV7TIIq tFlBZ9QQrt19cKrxSt4Th92aZvFnYGVAmZvjG4cLz6Fd8zyUd3TmnBGyK9NvND0R CEDqjBDiJL/1JXX4DDVtrj/ymf1bmqBB4bS+FIuK5252kdAzK0nDRjhO91mf3842 FVyIe/6IR7POVBute5JUPOuRtIQe8rHafWk413zTgOqPO7TbSTmbhrGSjBAfYR/l oPgSAslE8cBLyeZgw80CY0dfBO0+qGP86ur2h+AADPuDzyqFQq2RdqGAo+n/3UJP KlgKzkDp9KxS/2iZCqu7J3l5Y7xgtXtPYUwKJcBzMut6gJNJfXx6YAe03wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8BttnW44iYCGkFfuCzRVRhuWvnMB8GA1UdIwQY MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt ZGMwNmRkODA1OTYwLzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4nbDtaY LKYI4AeJRaOG4XCXIu4SJ9afUJdRC8hopO7OSeDGVzuy1ZP00DmbXZen5p58kV2j DpPa5c4fvtgrdWZsugAoCUysUZT4ddzYLCsbrCDyj0T4pHneSTpFnQn50GjdQbiU 2mhY8E2YAhSBsjFCXJRqogmdC/JQ0XHf2f7h9aCzxz9EEaQTi9QYZKujC20lqu2v jIZqktL+z4k966vGnVq7bLjGgbksVXdE1tyJ6IITCs1GiSkJIFfITAM0RD2ty3j8 hWfgDNE3PjLspN7Ck7LfIe3HU5OEdVmZSp4HQKLX+OGpz9MTV9Wn5F9hqvwFksSp wnPZBd8Ct7J0/w== -----END CERTIFICATE-----Generated at Sun May 19 20:28:59 2024 by rpki-client on console-fra.rpki-client.org